Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1wcDg0LXYzbXctZ2c0d84AA--l
Taipy 3.1.1 affected by CVEs on flask-core and pymongo
Summary
CVEs on latest 3.1.1
Details
SECURITY ISSUES
CVE-2024-1681: flask-core <4.0.1
latest version of taipi 3.1.1 needs <=4.0.0
CVE-2024-5629: pymongo <4.6.3
#latest version of taipi 3.1.1 needs <=4.6.1
PoC
please upgrade to these versions
Impact
pre-commit breaks
Permalink: https://github.com/advisories/GHSA-pp84-v3mw-gg4wJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcDg0LXYzbXctZ2c0d84AA--l
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: 11 days ago
Updated: 11 days ago
Identifiers: GHSA-pp84-v3mw-gg4w
References:
- https://github.com/Avaiga/taipy/security/advisories/GHSA-pp84-v3mw-gg4w
- https://github.com/advisories/GHSA-pp84-v3mw-gg4w
Blast Radius: 0.0
Affected Packages
pypi:taipy
Dependent packages: 2Dependent repositories: 4
Downloads: 7,306 last month
Affected Version Ranges: <= 3.1.1
No known fixed version
All affected versions: 1.0.0, 1.1.0, 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.4.0, 3.0.0, 3.1.0, 3.1.1